COMODO DiskShield 1.0.0.7 BETA Released!

Watch out returnil! Not really but its still nice to see what comodo can bring.

http://forums.comodo.com/comodo_diskshield/comodo_diskshield_1007_beta_released-t23667.0.html

 

Looks very similar to Returnil and the likes,which partitions/whole disk/ext.disks are protected ? Great idea to implement saving at reboot with the thirth beta release !

 

Only one HDD ? I have two internal HDD's.

 

From the Comodo Forum;

.

Could get interesting-lets hope its kept light and simple!

edit-Huupi just said the same thing!

 

I hope they remove the beta on the title. I think it should be alpha.

Two BSOD in 3 mins when XP SP2 starts.

More and more Error messages came out when I try to enable the protection.

 

LOL. There isn't much to test, if it starts like this.

 

Hi QQ2595,
Can you please help us with crash-dump and would be nice if you could enlist security software you have installed in your system.

Thanks for giving it a try.

-umesh

 

Liking it so far, got it running side by side with returnil.

 

I tested it in my VMWare 5.x. When BSOD, I just restore it to an old snapshot. So I did not keep the dump file.

I have A-Squared and EQS installed in that XP Sp2. Now, I can run it, but suddenly has the same error message: ....FormatEX...

By the way, I am quite sad when it told me it can only run in admin account.

And it does slow down the system no matter the protection is enabled or not. I just waited for 2 mins to login my account and see the desktop.

 

I tried it too.

It seems the Diskshield can not protect the VP that created by Returnil.

I try to mount/dismount the VP when DiskShield protect the C:\, but get BSOD suddenly.

 

Second software of this type to support x64.

 

Anyone knows if it modifies MBR? Can I try it with Eaz-Fix? Just want to play a bit.

Thanks

 

Still a few betas to go.

Anyway, It's working nice here on XP SP3, But...Still room for improvement

Josh

 

Works fine with eaz-fix on my system. Gave it a bit of a test and it seems to do its job well.

 

Thanks for the info. Someone must attack it with :

Killdisk virus
MBR tool
Robodog trojan

May be QQ2595 can do it.

 

Robodog trojan bypasses COMODO DiskShield.

But as the betas go along all this stuff will be fixed.

Josh

 

Hi,

There are several reports that indicate such problems on Chinese forums.

EDIT: Some one just released test results of Comodo diskshield vs four other low level attackers.

Diskshield fails all four miserably. My little advice: to refrain from using it until these vital concerns have been properly addressed. It is not uncommon for Comodo's beta stuff to have such problems. I have had unforgiven/unforgettable encounter with its memory firewall(formerly called memory guard) beta sometime ago.. Of course, its present state is perfectly suited for beta testers.

I can not disclose the test results details nor the links to these attachers(files) due to Wilders' terms.

 

egemen said this will be fixed in later releases.

 

Prosuct seems great. Tried it in a fresh snapshot of Eaz-Fix. No problems. On my system this beta is very stable though it,s a fresh snapshot without any security software. I works great. On both FAT32 n NTFS. Memory usage also small. I did not feel any slow down. It does use a cacahe file like windows steady state.

U can shadow all partitions unlike Returnil. I hope it,s development will be good and bugs will be fixed.

As far as low level disk access is concerned that is a bit common weakness of many such software- they fix one and onther one is discovered. I will not trust any shadow software for such a level of protection. It,s OK for all other malware though IMO.

As I read they will add to an option to continue shadow mode after reboot like SU and Windows Steady State, that will be nice.

I have played with it only for a short time, can,t say how it will behave on long term bais.

 

Yes, it is so true. That is why I currently use Shadow Defender, rather than DeepFreeze.

SD seems to address these concerns more responsibly than others.

 

Yes more but still not all such concerns.

 

Whcih low level access tool did you test?

 

I'm not worried about this. All malware, which attack such softwares, are executables (killdisk, robodog, robotdog, etc.). AE will kill them.

So far I'm not impressed by Comodo DiskShield, it looks like another ShadowDefender under a different name and like all the others, it's not able to remember any system state. Can it handle reboot-softwares ?

 

Hi,
Sorry, I am just a vivid reader, rather than a keen tester---frankly, heavily handicapped in this regard.

if you read Chinese, Kafan is the source. Have a nice one.

 

I never trust lowclass forums. just try SectorEditor, bypass it.